Resubmissions

27/10/2022, 16:01

221027-tghd1scgdr10

21/10/2022, 10:54

221021-mzjlgagdc97

Analysis

  • max time kernel
    439347s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    27/10/2022, 16:01

General

  • Target
    02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk
  • Size 4.8MB
  • Sample221027-tghd1scgdr
  • SHA256 02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.majorityapps.exoticflowers
    1⤵
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4375

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/Cookies
        • Size 64KB
        • SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
        • MD5 SHA1 SHA512 SSDEEP

        Cookies-journal

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/Cookies-journal
        • Size 1KB
        • SHA256 bc78c1ba6824d414ba2258f3987a0589d1d8fed00ea4a119d57a0f87647edff7
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 574bc61b10aad01e4849d2fa57c51b10484bc5eb1448f0506f2ae2ec168894eb
        • MD5 SHA1 SHA512

        000001.dbtmp

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/Session Storage/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        000003.log

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/Session Storage/000003.log
        • Size 61B
        • SHA256 5c3a5b578ab9fe853ead7040bc161929ea4f6902073ba2b8bb84487622b98923
        • MD5 SHA1 SHA512

        LOG

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/Session Storage/LOG
        • Size 142B
        • SHA256 356f33a268d6bb001c06d1bd878280dae861a6643b9eff2f8b1791df6a806fb0
        • MD5 SHA1 SHA512

        MANIFEST-000001

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/Session Storage/MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 21344f2ae0976b97c3762dfb93e2dd7affdeed9f4b376813afa43ba40adb6dbe
        • MD5 SHA1 SHA512

        webview_data.lock

        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/webview_data.lock
        • Size 36B
        • SHA256 5b7a01ddf567b06612d96e0151e85a94f156415e0230d8bf520e82cc8549a395
        • MD5 SHA1 SHA512

        1582435991586.jar

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP

        settings.dat

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 5f30751128ccd00f6a2dc5cbff3a93d34f2287dacb95b540df447a27d111d427
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 0a82b15f9d6512e4e61ed06aad7a59d11d9d3f5931d4eb512c4ec8c64e2f020e
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 a75a9f102c53228e6690a86e2091bd9c50ff1c8f48a113f2a84e8d4ad0cc75f1
        • MD5 SHA1 SHA512

        f038e94cb33282ab_0

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0
        • Size 400B
        • SHA256 6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Default/HTTP Cache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 144B
        • SHA256 27084ca6e201f8a135179be2d73cf6b9097bd76f3fe76df02214280d87714f6f
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 96B
        • SHA256 d4af6df464116a10de1ff11aca2b8873de68d53c31de8aaf6a35694e81942f20
        • MD5 SHA1 SHA512

        font_unique_name_table.pb

        • Path /data/user/0/com.majorityapps.exoticflowers/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP

        221027_180158519.get

        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180158519.get
        • Size 190B
        • SHA256 bb44f6b9301f68278d23198180353e165af8482843408fad8601b1a302895602
        • MD5 SHA1 SHA512

        221027_180158943.get

        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180158943.get
        • Size 51B
        • SHA256 fb1d5fb4bb25e5ea842ef560bcae4e4f87db86ddd1d6abbfa93c3be7a2416e9a
        • MD5 SHA1 SHA512

        221027_180159071.get

        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180159071.get
        • Size 51B
        • SHA256 c022dc9a015cfde107c1d7102f6da8bc2524d3e0a5f1c9598e88e8eefe59e779
        • MD5 SHA1 SHA512

        221027_180159396.get

        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180159396.get
        • Size 51B
        • SHA256 3764b4630ca5951254103d35d257325cf614e49df8c88e26d391b3ac561f8b60
        • MD5 SHA1 SHA512

        221027_180159541.get

        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180159541.get
        • Size 51B
        • SHA256 65acff07d21d75660731aed77e03384b591466fd28942bc002cbfafe3677f24b
        • MD5 SHA1 SHA512

        221027_180200421.get

        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180200421.get
        • Size 51B
        • SHA256 987159abddf6f7e4b20de8e9e154691377c257a5cade26b0e53dae20dbc4f1a5
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180158604.log

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180158604.log
        • Size 352B
        • SHA256 9a7c6d57c698a785b4a841d1ace9d5be5045929e103d899a96804919f1f4ea34
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180158604.zip

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180158604.zip
        • Size 339B
        • SHA256 0949c237ef9de8e41df9b0f480f84a699126db1607ec12eb227313b99ae8ddf7
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180158973.log

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180158973.log
        • Size 256B
        • SHA256 b01481516708364e270a91300c6c9200c4112147b77c10253762fc724b517b53
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180158973.zip

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180158973.zip
        • Size 241B
        • SHA256 085a9e491729df117de19f6775877a0a8901c64a946df4614b1944b3f86be0c7
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180159077.log

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180159077.log
        • Size 256B
        • SHA256 95e1f11814f406a930cd9e1c312d11c0cbd6a6903e3bebfa984143e1d88236b5
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180159077.zip

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180159077.zip
        • Size 241B
        • SHA256 b3d6b1973aedd66ac198779d0fd4cecfad121b04d8e2b3837548b4812cb5fcc9
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180159405.log

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180159405.log
        • Size 256B
        • SHA256 7b0f5553edb1f820ee9dbbcce1ee5a11a0c739a2d353f4af9c787ffdf6bf034d
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180159405.zip

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180159405.zip
        • Size 241B
        • SHA256 fccd06ff54723e7ae20034a7053cf80f09af5662887349c672c3983edaefb902
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180159546.log

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180159546.log
        • Size 256B
        • SHA256 c48444c0c49fd14ac0731a49a81aead166a046cde5cd23bcb69799d493810067
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180159546.zip

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180159546.zip
        • Size 241B
        • SHA256 d683282237b34992f7a6d48613e167dff315f34c4502a1679378351b56d32f85
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180200441.log

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180200441.log
        • Size 256B
        • SHA256 6281e16c9f1b28320afd2632d9953cbb5d9638807cbf56099f867470338d3481
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180200441.zip

        • Path /data/user/0/com.majorityapps.exoticflowers/files/363f2be05278049d_221027_180200441.zip
        • Size 241B
        • SHA256 b2d86432a76b278c164d8cf6a62653aa186873da354fe6b621a8a7db6089202c
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512

        admob.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/admob.xml
        • Size 133B
        • SHA256 18ef20be6ad2e2086573f7acfb7ebd63f83778b96665bfc98b1a37844eb83c73
        • MD5 SHA1 SHA512

        com.google.android.gms.appid.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 129B
        • SHA256 60e7d9eef080c7ca927bfc5aaa7d3c244aa09ff439b68fed0e6ed9980559c9c8
        • MD5 SHA1 SHA512

        com.google.android.gms.appid.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 00cddf4cbe54beb70f11ba9f95f21e5afda4433dc3daa31c7c2335304304b789
        • MD5 SHA1 SHA512

        com.google.android.gms.appid.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 719b428a1aed8b516487bf51878cff1bfcf2dfa84d1708712360b6b2ddd582fa
        • MD5 SHA1 SHA512

        com.google.android.gms.appid.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 be41c05839042a5488624b01ae2270ecea1276e6db6a295d5401817d21f81c4c
        • MD5 SHA1 SHA512

        com.google.android.gms.appid.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 1b945bd900d6add26d6dc8cce1148dcea72e0d0dc88839b1f109b8ce9f816fb9
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 122B
        • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 300B
        • SHA256 0ea969184a076708412928a158551d8fb396443daaaa87535b1c522f82b0ae05
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 396B
        • SHA256 dfcf111c13484362efd9c506f7821762e01c4adb96270f726a0f1b3fe5168e42
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 457B
        • SHA256 d7969eaa0ba44a7af88ea099f0ac642e51b1f42987970839b6caa8ba66e2f580
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 520B
        • SHA256 9ec551ff7ff88fae6d7d7e31d2df2714989dd286e0bd4064171a10dc2d81b00b
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 521B
        • SHA256 808a57a9f9bd54772cd9220bf1e65206b04ab3c208955696dd470b6ac422b43f
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 522B
        • SHA256 fd823a1345d96b65c2a7dcf394a674c9bf169abda91d6cf4de8997a9232b1a5d
        • MD5 SHA1 SHA512

        rateapp.xml

        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/rateapp.xml
        • Size 107B
        • SHA256 8f2d81416d2aa770b618858d0272183cdd01b8be028f789a4acc9ee103157c4d
        • MD5 SHA1 SHA512